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Beedenue. CraTba NOcBaleHa HCCeqOBaHHIO KpulITorpadu- 
yeckolH cucremb! NTRUEncrypt, pacuery amropuHTmuMyeckolt 
ClO*wHOCTH pa3spaboTKH Kpuutocuctemst NTRUEncrypt u ee 
Mogu@uxkaynu. Lem uccneqopanusa: paspadotKa 2dpdekTuB- 
HOrO [OCTKBaHTOBOrO KpHTorpaduyeckoro asropHTma 
NTRUEncrypt, oOmayaronlero BbICOKOM KPHITOCTOHKOCTBIO K 
aTaKaM C KBaHTOBOrO KOMIbioTepa, a TakxKe pa3paOoTKa MO- 
Wupukalun MpeqoxKeHHOrO asIrOpuTMa, aHasIM3 UM 9KCIepH- 
MCHTAJIbBHOe JOKa3aTCJIBCTBO ero IIPCHMyLIecTB. 

Mamepuaaet u memoovi. Upennoxeno onmucanve cHcTeMbI 
wm@popanua NTRUEncrypt. Wsyyena moguduKanna pac- 
CMaTpHBaeMOro aJITOpHTMa, TpeycTaBleHa OIOK-cxema pea- 
JIM3al1MH OCHOBAHHOYTO Ha HeM TiporpamMMuHoro cpeyctsa. ITpu- 
BeleH TIpHMep padoTe! MporpaMMHoro cpeycTBa H JaHa ero 
xapakTepuictuka. JIocTOBepHOCTb pe3yIbTaTOB OOOCHOBaHa C 
nmomMoubio U-KputepHa Manna — Yuruu. IIpu npopeyzenuu 
SKCHepHMeHTa HCIOIb30BaHa CTOPOHHAA NIporpaMMHas pealin- 
3allua KpunTorpapuyeckolt cuctempr RSA. B ucxogHbiii Koy 
Bcex Tpex uporpammM NTRUEncrypt, RSA, moguduxaynn 
NTRUEncrypt Obu1 BHeypeH oeMeHT KuIacca Stopwatch. J[an- 
HBIM KIacc NpegqOcTaBaeT HaOOP METOAOB H CBOHMCTB, KOTOpPBIe 
MO2KHO HCIOJIb30BaTb JIA TOUHOTO H3MepeHHA BPeMeHH, 3aTpa- 
YeHHOrO Ha BbINOHeHHe. TakuM 06pa30M, NOABHJIaCb BO3MO2%K- 
HOCTb (PHKCHPOBATh pe3yJIbTAaTbI 3aTPaxeHHOTO BPeCMeHH Ha BCeX 
TpeX OCHOBHBIX 9Talax: co3qaHve KHOoUel, WIMdppoBaHHe u 
paciuu@posanne coobuleHua. 

Pezynemamei uccaedoeanua. J\oKa3aHbl TpevMylecTBa pa3- 
paOoTaHHBIX KpHITOCHCTeM 10 XapaKTepHCTHKaM TIpoH3BoqH- 
TeJIbHOCTH. BpIOJIHeHO 9KCIepHMeHTasIbHOe CpaBHeHHe pea- 
JM30BaHHOrO asroputMa NTRUEncrypt u ero MoquduKayun. 
IIpu stom o6o3HayeHEI BCe TIpeMMyecTBa NocieqHeH. 
O6cyarcdenue u 3aKlo04ueHUA. DKCIeEPHMeHTAaIbHO OKa3aHo 
IIPCHMylecTBO MCMONb30BaHHA MOLHpUuKaWMH asroputTMa 
NTRUEncrypt. Hopoe npunoxenue Ha 25 % OnicTpee BBITIOI- 
HAeT OOLIyIo0 padoTy No reHepallHu KOUeH, WIMdpoBaHHto U 
pacuimposanuto. Ilomumo 9sToro OnTHMH3HpyeTcaA MCTIOJIb- 
30BaHHe BHYTpeHHe NaMATH 3a CUeT YMCHBIICHHA Beca HC- 


* 2 
PaOota BbIMOJHeHa B paMKax HHMWMaTHBHOM HMP. 


Introduction. The NTRUEncrypt cryptographic system, the 
calculation of the algorithmic complexity of the development 
of the NTRUEncrypt cryptosystem and its modifications are 
considered. The study objectives are to develop NTRUEn- 
crypt, an efficient post-quantum cryptographic algorithm, 
which has high cryptographic resistance to quantum computer 
attacks, to work out a modification of the proposed algorithm, 
to analyze and experimentally validate its advantages. 
Materials and Methods. A description of the NTRUEncrypt 
encryption system is proposed. The modification of the con- 
sidered algorithm is studied; the block diagram of the imple- 
mentation of the software based on it is presented. An example 
of the software operation and its characteristic is given. The 
reliability of the results is proved using the Mann-Whitney U 
test. During the experiment, the third-party software imple- 
mentation of the RSA cryptosystem was used. A Stopwatch 
class element was introduced in the source code of all three 
programs of NTRUEncrypt, RSA, and NTRUEncrypt modifi- 
cations. This class provides a set of methods and properties 
that can be used for the precise measurement of the execution 
time. Thus, it became possible to record the results of the time 
spent on all three basic stages: key creation, encryption and 
decryption of the message. 

Research Results. The advantages of the developed cryptosys- 
tems in terms of the performance characteristics are proved. 
An experimental comparison of the implemented NTRUEn- 
crypt algorithm and its modification is performed. All ad- 
vantages of the latter are indicated. 

Discussion and Conclusions. The advantage of using the 
NTRUEncrypt algorithm modification is experimentally vali- 
dated. The new application is 25% faster to perform general 
work on key generation, encryption and decryption. In addi- 
tion, the internal memory usage is optimized through reducing 
the weight of the source program file and the size of the secret 
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XxOQHOro (paliia NporpaMMbI MW pa3Mepa ceKpeTHOrO KONA. key. When attempting to crack a ciphertext, cryptographic 
IIpu nonbirke B30Ma WIM@poTekcTa MposBIAeTcA KpHMTO- robustness and complexity of using quantum algorithms are 
rpadwyeckad CTOMKOCTb HM CJIOXKHOCTh HCIHOb30BaHHA KBaH- shown. 
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Breyenne. Tom4kom 1a paspaOoTKH HOBO KpunTorpapuyeckoli CHCTeMBI Mocry2Kua ctaTbA [1]. B Hei m0- 
Ka3aHO, YTO KBaHTOBbIC KOMIBIOTEPbI MOTCHI[MAIbHO YIpOXKAIOT B3JIOMOM BC€M IIMpOKO HCHOIb3yeMbIM KpHTorpa- 
(pHuecKHM asIropHTMamM. 

IIpeaxctapieHHad B WaHHOM CTaTbe NporpaMMuHas pa3spaboTKa OOsayaeT KPHNTOCTOMKOCTbIO 10 OTHOLICHHIO K 
BO3MOXKHBIM KBaHTOBbIM aTaKaM HM IIpeBOCXOJUT aHaslorM (HalIpHMep, KpHuTocuctemy RSA) mo xapakTepucTukaM 
CKOpOcTH paOoTEI asIrOpHTMa H TO KOIM4eCTBY 3aTPayHBaeMbIX pecypcos [2]. ITum oOycoBseHa aKTyaJIbHOCTb paoo- 
TBI. 

OObekTOM UccHeqOBaHHA ABIIAeTCA KpunTocuctema NTRUEncrypt. 

IIpeamMet uccneqoBpaHua — asIrOopHTMMYeCKad COKHOCTh pa3spaooTKH KpuTocuctempl NTRUEncrypt u ee 
MoquukalMn. 

Ljemu uccneqopaHua: pa3spadoTKa 9pd@eKTHBHOrTO MOCTKBaHTOBOrO KpHITorpadwyeckoro asIropHTMa 
NTRUEncrypt, oOnaqaronjero BEICOKOM KPHITOCKOHCTHIO M0 OTHOLICHHIO K aTaKaM C KBaHTOBOTO KOMIIbIOTEepa, a TaK- 
2%Ke CosqaHue MOAMPUKAYMH NpeAIO%RKeHHOFO asITOpHTMa, aHasIM3 HW IKCIHCPHMECHTAJIbHOe TOKa3aTeJIBCTBO ero IIpeHMy- 
WeCTB. 

B cooTBeTCTBHH C HOCTaBJICHHOM IeJIbIO OBLIN ONIpeAeJeHbI ceyroulMe 3aa4H. 

1. Uccnegopats anropuTM padots! Kpuntrocuctempl NTRUEncrypt. 

2. PaspaOotaTp anropuTm MogudpuKayuu NTRUEncrypt. 

3. Peanm30BaTb IIporpaMMHble cpeycTBa Kpuntocuctembl NTRUEncrypt u ee mogudpukannu. 

4. [IpoaHanu3upoBaTb MU CpaBHUTb Be IpOrpaMMBI J{pyr c JpyroM H Cc ux aHayloroM — kpuutTocuctemoli RSA. 

Matepnasibi 4 MeTobiI. PaccmoTpuM onucaHHe cucTeMbI wudpoBanua NTRUEncrypt. Kpuntorpapuyeckaa 
CHCTeMa C OTKpBITHIM KHOUOM NTRUEncrypt ucnomp3yer onepanmn Hay Kompiom Z LX] / (X% — 1) mxorounenos crte- 
TleHH, He NpeBocxogzamel N— 1 [3]: 

a = dy +a, *X1 4+ ay *X?2 ++ + Gy_y ¥ XN, 
THE Ap, Ay, Az... Ayn, — Wesble anc. 
Onepatmn ciox%KeHUA M yMHOXKeHHA pOu3BOAATCA KaK OOBIYHO, 3a HcKIONeHHeM Toro, aro X“ 3amenseTcs 


N+2 
,X 


Ha 1, XN*1 samensetca Ha X* 3amMeHsetca Ha X* nT. I. 


Kpuntocuctema onpeyesiaeTca pa1OM MapaMeTpoB, OCHOBHBIe 43 KOTOpBIX: N, pu q. Ja coxpaneHusa cTOH- 
KOCTH aJIrOpHTMa HEOOXOAUMO, 4TOObI MapaMeTpbl P Hg OBI B3AMMHO MIpOCTBIMH. 
UroOpl oOecne4vTb BbICOKYIO CTOMKOCTb asIrOpHTMa K pa3JIM4HbIM aTaKaM, PCKOMCHyeTCA HCIHOb30BaTb 
cneyyroujve Mapametpsi (puc. 1): 
OGosHayeHve N= q df dg = dr FapaHmuposaxHan cmouiKxocmb 
NTRU167:3 167 | 128 
NTRU251:3 251 | 128 


p 
3/61 | 20 | 18 | YwMepeHHbii ypoBeHb CTOMKOCTU 
3 
NTRU503:3 503 | 256 | 3 | 216) 72 | 55 | Bbicoyamwuii ypoBeHb CTOMKOCTU 
2 
2 
2 


50 | 24 | 16) CTaHgapTHbIM ypoBeHb CTOMKOCTK 


NTRU167:2 167 | 127 
NTRU251:2 251 | 127 
NTRUS503:2 503 | 253 


45 | 35 | 18 | YmepeHHbii ypOBeHb CTOMKOCTU 


35 | 35 | 22) CTaHgapTHbIl ypoBeHb CTOMKOCTH 
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155 | 100 | 65 | Beicoyavwun ypoBeHb CTOMKOCTH 


Puc. 1. PexomeHyoBaHHble NapaMeTpbl 
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Pe3y.1bTaThI HccseqoBaHHA 
Tenepayua xuoyeu. boO xouet nepegath coobmenue Amuce. Jia 3Toro emy HeOOXOJHMBI OTKPBITHIM MU 3a- 


KpbITBIM Kou. Tlostomy oH cily4aiHbIM OOpa30M BbIONpaeT Ba MaJIbIX NOJIMHOMAa f M g H3 KOJIbIa YCeYCHHBIX MHO- 
roueHoB R. ManocTb NOJHHOMOB O3HadaeT, YTO OTHOCHTEIbHO MPOH3BOJIbHOTO MOJIMHOMA TIO MOJO g, B KOTOPOM 
Ko9UUMEHTEI paBHOMEPHO paciipeeseHsI, y MaIOrO HOUMHOMa OHM OyAyT MHoro MeHbuUte g [4]. Ja onpenenenua 
MaJIOCTH NOJMHOMOB McHOB3yr1oTcs YHcIa df u dg, KoToppie bo BelOupaeT CaMOCTOATEJIBHO. 

Tlommuom f 6yyeT umets df kospdpuyHeHTos, paBHBIx exquHuue, (df— 1) kosddpuyMeHToB, paBHbIX MHMHYyc e]H- 
HUUe, HM OCTAJIbHbIe, paBHble HyJIIO. 

Ilommuom g OyyeT uMeTb dg Ko3x:pHUMeHTOB, PaBHbIX CMHULUe, CTOIbKO 2Ke KOIPPUMHEHTOB, PaBHbIX MHHYC 
eCAMHULe, H OCTaJIbHbIe, paBHble HyJIO. 

boO fosuKeH XpaHuTb BbIOpaHHble NOJMHOMBI B TaliHe, TaK Kak JIHOOOH, KOMY OHH CTaHYT H3BeCTHBI, CMO%KET 
pacuiM@posats coobueHue. 

CaenyrouquM arom bo6 ssrauciaet oOpaTubie NOMHOMBI f, M fz 10 MOLYJIO p U q COOTBETCTBEHHO, Takue, 
4TO: 

f X fp = 1(mod p) uf x fy = 1(mod q). 

Ecau ciy4aitHo 9TH OOpaTHbIe MOJIMHOMBI He CyljecTByI0T, TO boO Bo3BpalijaeTca Hazaj, M 3aHOBO BbIOMpaeT 
TIOJIMHOM f. 

Cexperupiii kr04 — 970 napa (f, f,), a OTKPBITHIM KHOU h BEIYHCIIAeTCA TO (bOpMyme: 

h=px f, X g (mod q). 

HWudpoeanue. Anuca xouet OTHpaBuTb coobuienue booby c nomousbio OTKpIToro Kir04a A. [ua sToro Ammnce 
HYKHO IIpecTaBHTb CBoe COOOMIeHHe B BU NOJMHOMa m C KOIPPUIUMEHTAaMH M10 MOLY JO p, BbIOpaHHbIMH H3 WMatia- 
30Ha (—p/2, p/2]. 3arem Anuce HeoOxofMMo BbIOpaTb Apyroi MaJIbIi MOIMHOM 7, KOTOPbIM Ha3bIBaeTCA «OCIICIIAIO- 
WIM», W BBIYHCIUTb WHpporekct: 

e = (rxh+m)(mod q). 

Pacwudpoeanue. boo nosmyuaet ot Anuchi 3alMdpoBaHHoe coobuljeHue e U xoueT ero pacumudposats. Iep- 

BBIM J[eJIOM, HCHOJIb3yA CBOM CeKpeTHBIM K104, boo BBIMHcIMAeT: 
a=f xXe(mod q). 
Tak kak boO BaruuciiaeT 3HavYeHHe a TO MOYO UMCIa g, OH NOJDKeH BbIOpaTb ero KOIPPUUMEHTEI 43 WMaria- 
30Ha (—q/2, q/2] u 3aTeM BBIMMCIMTB: 
b=a(mod p). 
Hakoneu, bo6, ucnomb3ya BTOpylo YacTb CeKpeTHOTO KIIOYA, HOMyyYaeT HCXOMHOe CoooueHHe OT AJIMCBI: 
c = fp X b (mod p). 

Moouquxayua anzopumma NTRUEncrypt. Kak BuO 43 OMMCaHva alIrOopuTMa, MOMHOM f JOJDKeH OTBeC4aTb 
CJIELYIOUMM TpeOoBaHHaM: 

— TIOMHOM f ABIIAeTCA OOpaTHMBIM TIO MOJLyJIIO Pp, 
— TIOMHOM f ABIIAeTCA OOpaTHMBIM TIO MOJTyIIIO q, 
— TIOJIMHOM / ABJIACTCA MaJIBIM TIOJIMHOMOM. 

B camom allropuTMe oOpaTuMocTs 110 MOYO p U g TapanTMpoBasackb CJIeAyIOuWMM OOpa3som. Ecumm Byapyr re- 
HepHpoBasica ToMHOM f, He OOpaTHMBIi 10 OAHOMY M3 MOLysel, TO OH OTOpacbIBasIcA M reHepupoBalica ceqyIOWHH 
— MU TaK JO Tex lop, MoKa HEOOXOAMMBIi MOIMHOM He OyZeT HalizeH. 

IIpeqnaraemas MOAUPUKALMA 3aKIIOUaeTCA B TOM, YTOOI 3AMCHUTL MOJIMHOM f HOJIMHOMOM Ba: 

f=1+pF, (1) 
rae F — maisibiii NOUMHOM. 

J\aHublit WOAXO UMeeT ClleyIouIMe IpeHMylyecTBa. 

1. M3 camoro Bpipaxenua (1) BuHO, YTO MOMHOM f Bcerfa OOpaTUM M10 MOsyIHO p. ITOT PakT ycKopserT re- 


HepalHro K104eH, Tak Kak He TpeOyeTca AONOJIHHTCJIBHO BBIYMCIATS fy. 
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2. Tlockonsxy f-' = 1 mod p, To upu pacumposanun He TpeOyerca JOMONHUTeIbHOe yMHOxeHHe Ha f', 4TO 
ycKopseT caM TIpoljecc paciiMposku. 3akpsITbii KOU B 3TOM CIyYae OyZeT MpercTaBATb coOoii He napy (f, f,), a 
(f). 

Tenepayua xmoueu. Kak 4 B OpHTMHasIbHOM aJIroputTMe, BHayasie boo BplOupaeT WapamMetps! wudposanna N, p, g 
u uucna df, dg. 3aTeM OH CilyyaltHbIM 0O0pa30M BbIONpaeT Ba MaJIbIX TIOJIMHOMa Fu g V3 KOJIbLa YCCUCHHBIX MHOTOYJICHOB 
R. 

BurauciaeT MoAMpUUMpOBAaHHBIM MoMHOM f 10 opmyste (1). 

Cuexyroujim marom boo Bprauciaet oOparHplit NOMMHOM fz 10 MOslystO g: 
f X fy = 1(mod q). 
Ecau cyano o0patHblii mouMHOM He Haxogutca, boo Bo3BpalijaeTca Ha3aJ, HW 3aHOBO BbIOMpaeT MOMHOM /f. 
CekpeTHBbIii KII0Y — 9TO TIOJIMHOM f, a OTKPBITHIM KOK A BEIYHCIIAeTCA CELYIOUIMM OOpa30M: 
h=pxX fy X g (mod q). 

Ludpoeanue. Wuppospanne ocraetca 6e3 H3MeHeHHH, BCe B TOUHOCTH KaK B OPHTHHaIbHOM aJIropHTMe 
NTRUEncrypt. 

AsIMca Xo¥eT OTIpaBHTb cooOmjeHue boOy c noMousb1Io OTKpBITorO KONA A. J[na sToro Ammce Hy2KHO mpey- 
CTaBHTb CBOe COOOMeHHe B BHe NOMHOMa m c KOIPPUUNeEHTaMH M10 MOJO Pp, BbIOPaHHBIMM v3 AMara30Ha (—p/2, 
p/2]. 3arem Anmce HeoOxoyzMMO BbIOpaTb Apyroi MaJIbIii MONMHOM 7, KOTOPbIi Ha3bIBaeTCA «OCIICIIAIONIMM»>, U BBI- 
YHCIUTb WHpporekct: 

e = (rxh+m)(mod q). 

Pacuuqdposeanue. boo nosyuaet oT Anuchi 3alMdpoBaHHoe coobusjenue e u xoueT ero pacumMdposats. Iep- 

BBIM J[eJIOM, HCHOJIb3yA CBOM CeKpeTHBIM K104, boo BBIaHcMAeT: 
a=f xXe(mod q). 

Tak kak boO BprauciiaeT 3HaveHHe a TO MOYO UMCa g, OH NOJDKeH BbIOpaTb ero KOIPPUUMEHTEI 43 WMaria- 

30Ha (—q/2, q/2] U 3aTeM BBIMMCIMTB: 
b=a(mod p). 

Bcé, Ha 3TOM BEIYHCJICHHA 3AKOHUCHEI, MBI MOJYYMIM UCXOWHOe cooOmeHue OT Amucer: b = m [5]. 

Aloxazsameiecmeo pabomei moduqbuyuposannozo arzopumma. Jina WOKa3aTebcTBa paOoTEI alropuTMa pac- 
CMOTPHM CaM Miporecc pacuiMdpoBanna. 

3aummdpoBaHHoe coobusjenue oT AJIMCbI HMeeT BHI: 

e = (rxh+m)(mod q). 
bo6 ucnoub3yeT CBOM 3aKpBITbIM KOU — NOMHOM fF: 
a=f xe(modq) =(f X (rx h + m))(modq) =(f X (r X pf, X g + +m))(mod q). 
B pe3ysbTate: 
a=(pr X g +m X f)(mod q). 


Creaqy1olluM marom bod TousyuaeT NOJIMHOM b TTyYT€M YMCHbINeCHHA Ko3:bpullMeHTOB TIOJIMHOMa @ TIO MOJy- 


b = a(modp) = m x f(modp) = (m + m X p X F)(mod p) = m (mod p). 

Takum 06pa30M, MBI IIpoBepHIIM MW WOKa3asIM, YTO MOMHOM b jevCTBUTeIbHO ABJIACTCA HUCXOJHBIM COOOMIeHH- 
eM m. 

Peanuzayua anzopumma. B kavectTBe «3bIKa IpOrpaMMHpoOBaHHA UCHOIb30BaH OObCKTHO-OpHeCHTHpOBaHHbIit 
s3bIK IIporpaMMupoBaHua C#, OTHOCAIIMicA K CeMbe A3bIKOB C C-MOOOHbIM CHHTaKcucoM. Cpeya pa3spadoTKH — 
Microsoft Visual Studio 2015 Enterprise. [napHoe mpeumMyliecTBo WaHHOrO NporpaMMHOro MposyKTa — TpuoxKeHne 
c rpadbuyeckuM HHTepdelicom, KOTOPHIM MO3BOIAeT MOUb3OBAaTeNEO ObICTPO pa3z0OpaTbcA B YCTPOMCTBe HM CxeMe paOoTEI 
Ja@HHOTO MIporpaMMHOTro IIposyKTa. 


Ha puc. 2 mpuBeyena oOobmjeHHasd OIOK-cxeMa paOoTbI IIporpaMMHOTro cpejcTBa. 
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Puc. 2. boK-cxema asIrOpHTMa peasIn3alyHu MporpaMMHoro CpeCTBa 


ITIpumep pabomoi npozpammuoeo cpedcmea. NTRUEncrypt ucnosb3yeT TpH MOCTOAHHBIX Hapamertpa: N, p, g. 
OU BBOUATCA MOb30BaTeIeM Ha Hane «[lapaMeTpbl CHCTeMBD». 

Jlanee pacnonaraetca maHemb «l eHepalua Kro4uel». Ha Bxoy MofaroTcA WapaMeTpbI, BBe][CHHBIe M0JIb30Ba- 
TesIeM Ha pebIAyulem 9Tare. 3aTem cily4aliHbIM OOpa30m (bopMupyroTca Ba NomMHOMa fu g— TakHe, 4TOOBI: 
— KOJIMGeCTBO KOIPMHIUMCHTOB, PaBHbIX CMHC MU HYIKO, ObLIO paBHO YMCIY, KOTOPOe 3apaHee OlpeyeeHo B IIpo- 
rpamne; 
— cTelleHb MOJIMHOMOB COOTBETCTBOBAJIA BBCCHHOMY Hapametpy JN. 

3aTeM UcHoOmb3yeTca Teopema EBKiuya O HaxoxKeHHU HaHOobIero OOMero WeMTeIA Id MHOTOYICHOB U 
ee OOpaTHEI XO Tid BETYHCIeHUA ZByX OOpaTHBIX K f MOJMHOMOB IO MOJIyJIO p Ug COOTBETCTBeHHO. Barunciiaetca 


OTKPBITHI K104 A. 
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Tlonb30BaTelb BBOJUT JBOMYHEIM BU CooOMIeHHA m Ha HaHemM «LUuppoBanue» B oKHe «CoobujeHHe». CTo- 
UT OTMETHTh, YTO HCXOHOe CooOMIeHHe HeOOXOZHMO pa30uTb Ha OOKH 10 N OUT, Kax Tb U3 KOTOPbIX Oy eT oOOpaba- 
TbIBATLCA OTCIbHO H WpeoOpa3z0BblBaTb KaxKAbIM OOK B MOJMHOM Cc KoIp@uunentamn {—1, 0, 1} (8 qaHHoOH Mporpam- 
Me BMECTO 3HaveHHaA «1» HCHOb3yeTCA «2)). 

J\na onepanuu wMd®poBanua MporpaMMe HeoOXOAUMO BBIMOJHUTb MpesBapHTebHY!O MOATOTOBKy — creHe- 
PHpoBaTh OHH OCIeMMIAIOWIMM MOMHOM. On PopMupyeTca 0 TAKOMY %Ke IIPHHIHIy, UTO H MOMHOMBI f, g. 

Tlouy4eHHbIt OTKPBITHI KOU HU TOJMHOM 7 TalOT BO3MOXKHOCTb 3allMPpoBaTb COOOMeHHe Mm, MCHOJb3yA CO- 
OTBETCTBYIOLLYIO (POpMysIy. 3aTeM pe3yIbTaT MpoBepAeTCA Ha IPHHAaJIeKHOCTh KOJbILY YCCYCHHbIX MHOTOUWICHOB CTe- 
TleHu, He IipeBocxoyamett N — 1, u BEIBOAMTCA Ha 9KpaH. 

CneyyroulHit O0K pearM3yeT MexaHy3M Jewmmmpauun. [1a 3TOTO TOCIeAOBaTeIbHO BbINOMHAIOTCA eHCTBHA 
¢ yaeTom Koubuia ZLX]/(X™ — 1). 

PesybTaT MpOBeCHHBIX Olepalit oTOOpaxKeH Ha puc. 3. 


EE] NTRUEncrypt = 
































Napametppi Texepaua knioven Wneposanne 
KpuntocuicTemb! 
[Vv] Demorctpauia opHoro payHaa paboTe! 
N= /11 d=4,dg=3 Eutosoe coobwexnve: | 10011101001 
e=2 Crenepnposate = (270) #47 Lex Dex" 3+("6) +710) 
q= |7 awnpposate 











f = 4x°O + (3x71) + (3x2) + (-3x"5) +397 43°11 
g =x O71) +(0 73) 40744209) 2710 


Dewmppauna 
Lis fq= 333-3-3230233 Wuppotexct: 310-1-31-211-31 
Boron h= 1102-3312-202 
Pacwmppopats 


Ortxppiteit Kmiou: (h ); 


3akppiTeil Kniou: (Ff ). 10011101001 


Puc. 3. Boewmuii Buy Nporpammpl NTRUEncrypt 


Ha puc. 4 oToOpaxKeHbI pe3ybTAaTbI paOoTbI UporpaMMHOro cpeycTBa B BUe MCXOAHOrO TeKcTa, 3alIMppo- 
BaHHOPO HM pacliMppoBaHHoro. 


@m ext.tt — BnoxHoq @ sit text.tt — Brodit Jina rete = Oo x 
®aiin Mpaska ®opmat alin Mpaska opm Main Mpaska ®opmat Bug Cnpaska 


Texct ato: nucemen|’Ab p Pu EAT,¢Texct 370: nMcbMeHHaA MAM neYaTHaA OuKCALMA a 
BbiIcKasbiBaHnA unu ci°Ab&p MuB EAB p peyesoro BbICKa3bIBaHMA HAM COObWeHMA B 

peann3aumn ; Buipaxen| €A.. t MAB A..,d l) npotusononoxHocTb ycTHOW peanw3aunn;BeipaxeHHan uM 
3HakoB (HeZaBucumo lM@] Ab ~ uB ear BakpenneHHaA NOCPeACTBOM ASbIKOBLIX 3HAaKOB 
peanw3aumn) 4yscTsiDIAf""Y Mu €P.. ](He3aBMcHMO OT NMCbMeHHOM MAM yCTHOM dopmEl ux 
T.4. AMTepaTypHoro) [°Ab&Y Ev@l: ,,(d| peanvzaunn) yyscTBeHHO BOCNPMHMMaemMaA CTOpOHa 
KOMMyHMKauMH, o67a, €Af d YaB €P....p peyesoro, 8 T.4. AMTepaTypHoro, npoMsBegeHnA; 
(uenocTHocTbW) u oO} uBIEPb"d¥IMu@ AB) MunumanbHan eanHuua peyesow KOMMyHHKauMH, 

Texct 80 sTopom 3H) Du@l A.. ~YIEWBIY — o6nagaiuaa oTHOCMTeNbHEIM eAMHCTBOM 

B TpeTbem 3HayeHuM @n@ yA..(t¥ (uenocTHOCTbH) MW OTHOCMTeNbHOM aBTOHOMMed. 
oTnpaBHoW ToNKON B/BIEP..$p ABI Pro TekcT BO BTOPOM 3Ha4eHMM, ABNAWUMMCA OHYM U3 
ycTaHosnenue Ha ocil Af"* 0 wBIEP..,~Yacnektos texcta 8 TpeTbem 3Ha4eHHM (a MMeHHO, 
oTHOweHMA mMexay eri $Y LuBIEA] DY Eafero «nnaHom sBbipaxeHuA»), CAYXWT OTNPaBHOM TOYKON 
Hepeako nog texctoj€Pbh$d &b [I »"d¥l) acex unonormyeckux npoueayp. Ero yctaHopneHue 
OT oTgZenbHO Mopde!P....p DAW@IEA ~YI¥Ha ocHose KpuTM4eckoro M3y4eHMA MCTOpMM TeKcTa HM 
ynotpe6nenne pasmnl| W@IEA,,.” Ev@l€A..|oTHoweHvi Mexay ero BapwvaHTamm cOCcTaBnAeT 3ana4y 
uccnegoBaTenbcKux | (bf .d¥ Ev@le *ttexctonorum. Hepeako nog TeKCTOM nNoHMMaeTCA 
Tekct 8 TpeTbem 3H\EP..$d¥ u@l AP. | take n6oii peyesoi oTpe3soK — oT oTAeNbHOK 
«peyesoe npon3sege|M@lyAb p H BIEPb |mopdems: go nuTepatypbl B WeNOM, OfHAaKO Takoe 
«Teopum yenoro Tex/Qa IAb d ynotpe6neHve pasmbipaeT cneuMguky NOHATMA WM BeLeT 
cBoux yactei, unn | \MBIIP,, p¥ K HeYeTKOCTH MCCNegoBaTeNbCKMx pesynbTaTOB. 
o6nagaet uasectHon A.. ~YIEaBIVA.."pY |Texct 8 TpeTbem 3HayeHun («coobujeHHe», «Lenbiii 
cneunouyeckoi oprajl Af"*  L BILPB$d¥ texct» » “peyesoe npovzeefeHve») — npeameT 
opraHuzaynei atux | Ev@l: Frt¥l w ODA, oco6oro Pa3gena ounonoruu, «Teopun uenoro 
BHYyTpeHHed cTpyKTy|P [Pa@ A,(d m Btexcta», wav nuHreuctuku TekcTa. B oTam4ve oT i 








Puc. 4. Pesymptat paOorbi mporpaMMHOro cpeyCcTBa 


Okcnepumenmol. Leb 9KCIIePHMeHTAIbHOe HCCIeOBAaHHA — MOKa3aTb HU JOKa3aTb IPCHMyMecTBa 0 xapak- 
TePHCTHKaM IIpOM3BOAMTeEIbHOCTH pa3paOOTaHHbIX KPHITOCHCTeM B CpaBHeHHH C aHasloroM. (B paMKax JjaHHoH paoo- 
TbI B KaYeCTBE aIbTepHAaTHBHOM Oba BbIOpaHa KPHMTOCHCTeMa C OTKPBITBIM KII040M RSA [6].) Kpome toro, HeoOxo- 
{MMO ObUIO CpaBHHTb peasIM30BaHHbIit anroputmM NTRUEncrypt u ero MoAMuKalMto, YTOObI OTMETHTS IIpenMylecTBa 
TocueqHeli H MIpHBeECTH IKCIIEPHMEHTAJIBHbIC JOKA3aTeJIbCTBA. 

J\na OOo0cHOBaHHA JOCTOBEPHOCTH pe3yIbTAaTOB UCMONb30BasICA CTaTHCTHYecKHH U-Kputepuii Manna — Yut- 
HH, KOTOPbIM HCHOb3yeTCA JIA CpaBHeHHA JByX He3aBHCHMBbIX BbIOOPOK MO YpOBHIO KaKOro-JIM00 TIpH3Haka, H3Me- 


Pasymoe II. B. u op. Cpaenumenonoii ananuz moduguyupocannoi nocmKeanmocou Kpunmoepagmureckou cucmemot NTRUENcrypt 


Razumov P. V. et al. Comparative analysis of NTRUEncrypt modified post-quantum cryptographic system and standard RSA cryptosystem 





peHHoro KoMYecTBeHHO. Kputepuii no3BOuAeT ONPeACMMTb CTeMeHb pa3IM4HA Mex Ay BLIOOpKaMH U ABIIAeTCA Oosee 
MOLJHBIM II0 CpaBHeHHIO C KpuTepvem Po3eHOayma. 

J\na MpoBeyeHHA 9KCHepHMeHTa Oba UCMONb30BaHa CTOPOHHAA TpOrpaMMuHas peasM3alua KpuntTorpapuye- 
ckol cuctembl RSA. B ucxogHbiii Koy, Bcex Tpex nporpamM NTRUEncrypt, RSA, moguduxaunu NTRUEncrypt Obi 
BHepeH 31IeMeHT Kacca Stopwatch. JjaHHplii KNacc mpeyocTaBsaeT HaOOp METOOB HM CBOHMCTB, KOTOPbIe MOXKHO HC- 
TIOb30BaTb JIA TOUHOTO H3MepeHHA BPeMeHH, 3aTpayeHHOrTO Ha BbIMOHeHHe. TakuM OOpa30M, MOABHIaCb BO3MO2K- 
HOCTb (PHKCHPOBaHHA Pe3yIbTAaTOB 3aTpa4eHHOTO BPeMeHH Ha BCeX TpeX OCHOBHBIX 9Talax: cosqaHuve KHOYeH, WHd- 
poBaHne Hu paciuudpoBanne coobmenua. PesybTaTbI IKCIePHMeHTa pe ACTaBJIeHbI B TaOI. |. 








































































































Ta6smmua 1 
PesyIbTaTbI IKCIepHMeHTa 
No Bpema paootst Bpema padoTsi MozMpukaynn Pipes pido RSA: vex 
NTRUEncrypt, cex NTRUEncrypt, cex 
Tenepaua kode 
1 0,0239676 0,0190014 0,0964144 
2 0,0149743 0,0109994 0,1023557 
3 0,0129915 0,0099936 0,1372658 
4 0,0170503 0,0099772 0,0491137 
5 0,0139885 0,0099773 0,0869555 
6 0,0139880 0,0099782 0,0587503 
7 0,0129761 0,0099936 0,0986608 
8 0,0139931 0,0109775 0,0707417 
9 0,0139918 0,0099773 0,0595015 
10 0,0169748 0,0099777 0,0517874 
IWudposanne 
1 0,0069961 0,0069770 0,0453772 
2 0,0049961 0,0059796 0,0598658 
3 0,0059954 0,0049965 0,0265461 
4 0,0049966 0,0069966 0,0402407 
5 0,0069765 0,0060854 0,0783415 
6 0,0049961 0,0069989 0,0097463 
7 0,0059795 0,0059954 0,0247876 
8 0,0069961 0,0059954 0,0272320 
9 0,0089956 0,0049798 0,0494907 
10 0,0059954 0,0049744 0,0100916 
Pacuudpospanne 

1 0,0009843 0,0009843 1,0624476 
2 0,0010212 0,0010026 0,3692022 
3 0,0010193 0,0009974 0,765 1423 
4 0,0009989 0,0009975 0,9922103 
5 0,0030012 0,0009988 0,3056423 
6 0,0010017 0,0009975 0,3757183 
7 0,0009989 0,0009988 1,2844272 
8 0,0010021 0,0009989 0,5902735 
9 0,0010026 0,0009984 0,9932694 
10 0,0009844 0,0009970 0,8740392 
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K pe3ysIbTaTaM, IIpHBeeHHbIM B Taos. 1, mpHaMeHuM U-Kputepuii Manna —Yutun. CpaBHuM CKOpocTs reHe- 
pauuu k104el anroputua NTRUEncrypt u ero Moguukaunu. 

Cnenya anroputmy U-xputepus Manna — YuTun, pacriMiieM BBIYMCIeHHe KpuTepHaA 10 WaraM. 

1. CoctaBuTb OOLIMM patoKHpOBaHHbIl CIIMCOK H3 OOeHX BBIOOPOK, IIpHCBOHB MeHbINeMy paHry MeHbLlee 3Ha- 
yeHne. 

2. PasyenuTb OOMIMH pakoKHpOBaHHbIii CIMCOK Ha Ba, COCTOAMIHX H3 3IEMCHTOB MepBOl H BTOPOH BLIOOPOK. 

3. TogcuntatTb CyMMy paHros, UPHXOAAMAxXcA Ha MepBY!IO MH BTOPY!O BLIOOPKH MO OTACIbHOCTH, KaK 1OKa3aHO 
Ha puc. 5. 


[—* | 
1 OC 1 
p+ | __oarosos | ae | ———o.nns7m Sit 
ps | _osse00——+| 2 | ——SCSC~tosore SSSSC«dC CS 
GG Yo 
Se OC 
SE 7 7 
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Puc. 5. Bropoii war Bpraucienua U-Kputepua Manna — YuTuu 





4. Beruucumtp 3Hauenue U-xputepua Manna — Yurtuu: U = 9. Io taOmmue 21a ypoBHaA cTaTHcTM4eCKON 3Ha- 
YMMOCTH CilelyeT OMpeesMTbh KPUTHYeCKOe 3HAYeEHHE KpUTepHaA JIA WaHHbIX 11 vu n2 (puc. 6). 





Puc. 6. GetBeptpiit mar BbrancieHua U-Kputepua Manna — YuTHu 


Tak Kak 3Ha4eHua nl u n2 WA BCeX 9KCIeCPHMCHTOB OJMHAKOBBI, TO 9Ta TaOIHa OyAeT HUCHOb30BaTLCA B 
Ka@KOM BBIMHCJICHHH. 

Otcto1a MOXKHO CieaTb BbIBOA, YTO NOWyYeHHoe SMMIMpHyeckoe 3HaYeHHe U = 9 HaxOJMTCA B 30HE 3HAYHMO- 
ctu (puc. 7). CreqoBaTenbHo, HaOsIOqaeTCA 3HAYHTebHOe pa3IM4YHe MexKAY CKOpOCTbIO paOoTbI TporpaMMbl 
NTRUEncrypt u ce Mogudukanueti. Ecnu 9TOT (akT BbIPa3HTb B IPOWCHTHOM OTHOLICHHH, MOYYHTCA, YTO MOAUDU- 
xayua NTRUEncrypt Osictpee camo tporpamMMBI Ha 28 %,. 


Ocb 3HaYMMOCTH: 





Puc. 7. Och 3HauuMocTH 


AHaJIOrH4HO, OycKad MOAPOOHOCTH BEIMMCIeHHH, IpHBeyzeM pesyibTaTEI U-Kputepua Manna — YuTuHu u 
IIPOLCHTHOE MIpeBOCXOACTBO JIA OCTAJIBHBIX CyyaeB. 

Tenepayua koueu 

1. Mogudpuxayu1 NTRUEncrypt Osictpee nporpammpr NTRUEncrypt wa 28 %. TlomyaenHoe smmupuyeckoe 
3HadeHve U = 9 HaxoyHTca B 30He 3Ha4MMOCTH. 
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2. IIporpamma NTRUEncrypt Onictpee RSA ua 80 %. HlomyaenHoe smmupuyueckoe 3HayeHne U = 0 Haxogutca 
B 30He 3Ha4MMOCTH. 

3. Moguduxauua NTRUEncrypt Osictpee RSA ua 86 %. IlomyyenHoe smuupuueckoe 3HayeHHe U = 0 Haxo- 
TMTCA B 30He 3HAYMMOCTH. 

Ludposanue coobwenua 

1. TlomyaenHoe smmmpryeckoe 3HaueHue U = 47 HaxogNTca B 30He He3Ha4YMMOCTH. 

2. IIporpamma NTRUEncrypt Onictpee RSA ua 80 %. HlomyaenHoe smmupuyueckoe 3HayeHne U = 0 Haxogutca 
B 30He 3Ha4MMOCTH. 

3. Moguduxauna NTRUEncrypt Osicrpee RSA ua 84 %. HlomyaenHoe smmupuyeckoe 3HayeHHe U = 0 Haxo- 
JMTCA B 30HE 3HA4MMOCTH. 

Pacwuqpoeanue 

1. Mogudpuxayua NTRUEncrypt Osictpee nporpammsr NTRUEncrypt wa 17 %. [lomyaenHoe smmupuyeckoe 
3HaueHve U = 24 naxoyMTCca B 30HE HeOlpeeuIeHHOCTH. 

2. Iporpamma NTRUEncrypt Onicrpee RSA ua 99 %. TlomyaenHoe smmupuyeckoe 3HayeHne U = 0 Haxogutca 
B 30He 3Ha4MMOCTH. 

3. Moguduxauna NTRUEncrypt Opsictpee RSA ua 99 %. TlomyuenHoe smmupHyeckoe 3HayeHHe U= 0 Haxo- 
TMTCA B 30HE 3HA4MMOCTH. 

OG6cyxjeHne H 3aKIO4“eHHA. B paMkax JaHHOH padoTsl co3aHBl: 

— lIporpaMMuoe obecreyeHue, peau3yrouee padoty Kpuntocuctempr NTRUEncrypt; 
— lIporpaMMHoe cpeJcTBO, peasIM3yIolee MOAMPUKAaMi0 ITOM KPHIMITOCHCTeMBI. 

V3 npeumynuyects NTRUEncrypt nepey ananorom — Kpuutocuctemol RSA MoxHO ykKa3aTb OosIee BbICOKYIO 
ckopocTs paOorsl. BrmomHeHue onepanuii mudbpopanna u pacumbposanua Tpedyet O(n?) onepanmii, B OTHE OT 
O(n’) y toro *xe RSA. Ilo skcnepuMeHTambHEIM JaHHEIM MporpamMa NTRUEncrypt 3HauHTelbHO BBIMIpbIBaeT 10 CKO- 
pocTn padotTnl aslropuTMa B cpaBHeHuu c RSA. Kpome Toro, oTMeyaeTca HeOoblIoe yBeM4eHHe CTOMKOCTH pH ak- 
TH4ECKH TakKOH %Ke WIMHe KHOUa. HegoctTaToK CHcTeMbI — HeOOXOZHMOCTb MCHOMb3OBAHHA PEKOMCHOBAHHBIX Tapa- 
MeTPOB. 

Uro kacaetca crolkoctu NTRUEncrypt, To nocie co3qaHuaA KBAHTOBBIX KOMIIbIOTeEpOB OyAYT pelieHb! 3aaqn 
ObICTpoH dakTOpHu3allMN UM WuckpeTHOrO Jorapud@MupoBanna [7]. B stom cryuae RSA, DSA u nogoOusIe uM asroput- 
MBI CTaHyT Oecnoue3HbIMH. AktyabHoctb NTRUEncrypt coxpaHutca: oH OyeT BHOHE IIpHMeHUM HM B «MOCTKBaHTO- 
BYIO»> DIIOXY, T. K. He CyLeCTBYeT aITOpHTMa, pellarollero 3aqauy KpaTualiliero BeKTOpa pellleTKH. 

OKCHepHMeHTAJIbBHO JOKa3aHO MpeMMyLecTBO HCHOb30BaHHA MOAMUKauHH amroputMa NTRUEncrypt. Pa3- 
paOoTaHHoe lmpusioxeHve Ha 25 % ObicTpee BbINOJHAeT OOLLYIO padoTy Mo reHepallHu KOYeH, WudpoBaHMio MH pac- 
wM@posanuto. Kpome Toro, ONTHMH3HpyeTCA HCHOb30BaHHe BHYTpeHHeH MaMATH 3a CUCT YMCHbIIeHHA BeCa HCXOJ- 
Horo cpaiisia WporpaMMBI UM pa3Mepa ceKpeTHoro K104Aa. [pH nombiTKe B31IOMa LIN@poTeKcTa NpoABIAeTCA KpunTorpa- 
(puuecKasd CTOMKOCTb Mf CIOXKHOCTb MCIOIb3OBaHHA KBAHTOBBIX aJIFOPHTMOB. 
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